Research & engineering · Archive

Research & engineering

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Chainguard Actions is Generally Available: Hardening 1,000+ GitHub Actions and removing transitive CI/CD risks ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-06 · First collected 2026-10-24

• Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing ↗ (opens in a new tab)

  Imperva Blog · Published 2026-10-05 · First collected 2026-10-24

• Meet The Engineers Behind The Defenses You Trust ↗ (opens in a new tab)

  Broadcom – Symantec Blogs · Published 2026-10-05 · First collected 2026-10-24

• Bulletin d'actualité CERTFR-2026-ACT-042 (05 octobre 2026) ↗ (opens in a new tab)

  CERT-FR news · Published 2026-10-05 · First collected 2026-10-24

• Give yourself room to be human ↗ (opens in a new tab)

  Cisco Talos Blog · Published 2026-10-01 · First collected 2026-10-24

• The SonarQube Remediation Agent is now available on SonarQube Server ↗ (opens in a new tab)

  Sonar Blog · Published 2026-10-01 · First collected 2026-10-24

• September 2026 product update for Bitwarden Business plans ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-09-30 · First collected 2026-10-24

• Building a post-quantum certificate authority with Merkle Tree Certificates ↗ (opens in a new tab)

  Cloudflare – Security Tag · Published 2026-09-29 · First collected 2026-10-24

• The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-09-29 · First collected 2026-10-24

• OperTraitors: How Kubernetes Operators Betray Your Security Posture ↗ (opens in a new tab)

  Unit 42 · Published 2026-09-29 · First collected 2026-10-24

• Management Center 4.2: Enterprise SSO and Stronger Account Security ↗ (opens in a new tab)

  Nextron Systems · Published 2026-09-28 · First collected 2026-10-24

• Logic-Embedded PUF With Periphery-Free and Synthesized Implementation for Low Design and Area Cost IoT Security ↗ (opens in a new tab)

  IEEE Transactions on Information Forensics and Security - new TOC · Published 2026-09-25 · First collected 2026-10-24

• No One Gets Phished: The New Group-IB Browser Agent Applies Predictive Intelligence At The Click ↗ (opens in a new tab)

  Group-IB Blog · Published 2026-09-24 · First collected 2026-10-24

• Weekly All-Source Espionage Intelligence Brief 9.21.26 ↗ (opens in a new tab)

  Krypt3ia · Published 2026-09-21 · First collected 2026-10-24

• Qubes OS 4.3.2-rc1 is available for testing ↗ (opens in a new tab)

  Qubes OS · Published 2026-09-18 · First collected 2026-10-24

• Adversary simulation: what you need to know ↗ (opens in a new tab)

  UK NCSC guidance · Published 2026-09-17 · First collected 2026-10-24

• Unpacking a laZzzy Donut ↗ (opens in a new tab)

  TrustedSec · Published 2026-09-17 · First collected 2026-10-24

• Mapping out your unknown: A threat hunter’s guide to GitHub ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-09-16 · First collected 2026-10-24

• Closing the cloud security gap with runtime security ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-09-16 · First collected 2026-10-24

• CRA Reporting via ENISA SRP: How Manufacturers Can Prepare ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-09-15 · First collected 2026-10-24

• Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364) ↗ (opens in a new tab)

  F5 Labs All · Published 2026-09-11 · First collected 2026-10-24

• No One Inside The Machine ↗ (opens in a new tab)

  Censys · Published 2026-09-11 · First collected 2026-10-24

• CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key ↗ (opens in a new tab)

  Bishopfox · Published 2026-09-11 · First collected 2026-10-24

• From Infostealer Log to Marketplace Listing: A Technical Walkthrough of the Credential Theft Pipeline ↗ (opens in a new tab)

  Cyble · Published 2026-09-10 · First collected 2026-10-24

• False Allegations, Real Threats: Sexual Misconduct Claims Used as Phishing Lures ↗ (opens in a new tab)

  Cofense Intelligence · Published 2026-09-10 · First collected 2026-10-24

• Token Analysis and Tracking System (TATS) ↗ (opens in a new tab)

  SpecterOps · Published 2026-09-08 · First collected 2026-10-24

• Phishing in 2026. Latest statistics and analysis ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-09-08 · First collected 2026-10-24

• 7th September – Threat Intelligence Report ↗ (opens in a new tab)

  Check Point Research · Published 2026-09-07 · First collected 2026-10-24

• Bootlin toolchains 2026.08 released ↗ (opens in a new tab)

  Bootlin · Published 2026-09-06 · First collected 2026-10-24

• Breach of Confidence — 04 September 2026 ↗ (opens in a new tab)

  Javvad Malik · Published 2026-09-04 · First collected 2026-10-24